America’s Water Infrastructure Act (AWIA) requires municipal water systems serving more than 3,300 people to complete a Risk and Resilience Assessment and develop an Emergency Response Plan. In order to remain compliant with the U.S. Environmental Protection Agency (EPA), many utilities must submit their Risk and Resilience Assessment certification of completion before the end of this year.
Risk and Resilience Assessment
Risk and Resilience Assessments allow utilities to identify and mitigate potential hazards related to water facility infrastructure, monitoring practices, billing systems, chemical storage, general operations, and more.
Sample Cyber Security Incident Checklist from EPA
Utilities must submit a Risk and Resilience Assessment certification of completion to the U.S. EPA by the following dates:
Utilities serving 50,000 to 99,000: December 31, 2020
Utilities serving 3,301 to 49,999: June 30, 2021
Going forward, your utility must conduct a Risk and Resilience Assessment review/revision and submit recertification to the U.S. EPA every 5 years.
A Risk and Resilience assessment includes:
Natural hazards and malevolent acts (i.e., all hazards).
Resilience of water facility infrastructure (including pipes, physical barriers, water sources and collection, treatment, storage and distribution, and electronic, computer and other automated systems).
Monitoring practices.
Financial systems (e.g., billing systems).
Chemical storage and handling.
Operation and maintenance.
(source: epa.gov)
Emergency Response Plan
An Emergency Response Plan gives your utility the tools it needs to quickly and effectively manage imminent threats, including cybersecurity breaches, natural hazards, physical security risks, and more.
Utilities must complete and/or update an Emergency Response Plan and submit a certification of completion to the U.S. EPA within 6 months of completing your Risk and Resilience Assessment, i.e. no later than the following dates:
Utilities serving 50,000 to 99,000: June 30, 2021
Utilities serving 3,301 to 49,999: December 30, 2021
Similarly, your utility must conduct an Emergency Response Plan review/revision every 5 years and submit recertification within 6 months of completing your Risk and Resilience Assessment recertification.
An Emergency Response plan includes:
Strategies and resources to improve resilience, including physical security and cybersecurity.
Plans and procedures for responding to a natural hazard or malevolent act that threatens safe drinking water.
Actions and equipment to lessen the impact of a malevolent act or natural hazard, including alternative water sources, relocating intakes and flood protection barriers.
Strategies to detect malevolent acts or natural hazards that threaten the system.
(source: epa.gov)
Learn More
We know that regulatory requirements like these can place a significant burden on your utility. Our team is here to help you remain compliant and complete your Risk and Resilience Assessment and Emergency Response Plan without overextending your busy team. For more information, contact one of our experts today!
About the Authors
David W. Arnott, P.E.
Team Leader/Senior Project Manager
Dave has extensive experience in the planning, design, and construction project management of wastewater treatment facility renovation and upgrade projects. Areas of expertise include treatment processes, hydraulics, mechanical equipment, and wastewater disinfection. He also has experience in sanitary and water pumping station design and sanitary sewer wet weather facilities.
Donald J. Heikkila, P.E.
Project Manager
Don has extensive experience in the planning, design, and construction of water supply and wastewater management facilities. He also has experience with design of electrical distribution and control systems, and start-up of water and wastewater treatment processes. Don has been with Ruekert & Mielke, Inc. (R/M) since 2016.
